AI Smart Contract Auditing Faces Reality Check as New Tests Show Zero Exploit Success

Confidence in fully automated smart contract auditing has taken a notable turn after new findings challenged earlier claims about artificial intelligence capabilities, as fresh analysis from security researchers suggests that while AI tools can assist in identifying known vulnerabilities, they still struggle to execute real-world attacks without human input.

Earlier reports had indicated that AI systems could exploit up to 72 percent of vulnerabilities and detect nearly half of them, however, a re-evaluation conducted by BlockSec presents a sharply different outcome. According to BlockSec co-founder Yajin Zhou, the team expanded testing conditions and applied them to real-world incidents, as a result, exploit success dropped to zero across all tested scenarios.

Moreover, the updated research introduced broader testing configurations, as researchers combined multiple AI models with different operational frameworks. This approach aimed to eliminate bias tied to specific system setups, consequently, the findings raised concerns about whether earlier results reflected true model performance or simply favorable testing conditions.

Additionally, the study addressed potential data contamination, as previous benchmarks relied on known vulnerabilities that may have appeared in training datasets. To counter this, BlockSec tested AI systems against 22 recent security incidents, as these events occurred after February 2026, ensuring they fell outside existing training data.